1 Who we are
Highbrook Homes Limited (company no. 06040484), registered office Helm Bank, Natland, Kendal, Cumbria LA9 7PS (“Highbrook”, “we”, “our”, “us”) is the data controller for personal data collected via this website and in the course of our house-building activities. Companies House
2 Purpose of this notice
This notice explains what personal data we collect, how we use it, the lawful bases we rely on, the rights you have and how to exercise them, in accordance with the UK GDPR and the Data Protection Act 2018. Information Commissioner’s Office
3 The data we collect
| Category | Examples |
|---|---|
| Identity | name, title, date of birth |
| Contact | postal address, email, telephone |
| Transaction | reservation forms, option selections, payment details (processed by our PCI-DSS-compliant provider) |
| Technical | IP address, browser type, operating system |
| Usage | pages visited, time on page, click-throughs |
| Marketing preferences | opt-in/opt-out records |
4 How we collect your data
- Direct interactions (enquiry forms, brochure requests, reservation packs)
- Automated technologies (cookies – see section 8)
- Third parties (estate agents, mortgage brokers, Help to Buy agents)
5 Lawful bases for processing
We rely on one or more of:
- Contract – to take steps at your request or perform a contract for sale;
- Legal obligation – e.g. to comply with NHBC warranty or HMRC rules;
- Legitimate interests – e.g. to improve our website, prevent fraud (we balance these interests against your rights);
- Consent – for email/SMS marketing (you may withdraw at any time). Information Commissioner’s Office
6 Purposes of processing
- Handling plot reservations, exchanges and completions;
- Customer service and after-sales (including defect reporting);
- Marketing new developments where you have asked us to keep you informed;
- Website analytics and security monitoring.
7 Disclosures of your data
We share data only where necessary and under data-processing agreements, for example with:
- Solicitors, surveyors and NHBC;
- IT hosting, CRM and email-marketing providers (all UK or EEA-based);
- Utility companies to arrange meter installation/transfer;
- Government bodies if required by law.
8 Cookies and similar technologies
We use essential cookies for site functionality and optional analytics cookies (Google Analytics 4 in IP-anonymisation mode). When you first visit we display a cookie banner allowing you to accept, reject or customise settings in accordance with PECR and ICO guidance. Information Commissioner’s Office
9 International transfers
We seek to keep data within the UK/EEA. Where a supplier is based outside the UK/EEA we ensure an adequacy decision or UK Addendum to the EU Standard Contractual Clauses is in place.
10 Data security
Technical and organisational measures include SSL encryption and ISO 27001-certified hosting.
11 Retention
Plot-purchase files: 15 years after legal completion (to match structural warranty period).
Enquiry data with no sale: 2 years from last contact.
Cookie IDs: 13 months (analytics) or the browser session (essential).
12 Your rights
You may: access; rectify; erase; restrict; port; object; and withdraw consent. To exercise rights or complain, contact:
Data Protection Officer, Highbrook Homes Ltd, Helm Bank, Natland, Kendal LA9 7PS
You may also complain to the Information Commissioner’s Office (www.ico.org.uk) if you remain dissatisfied.
13 Use of AI Tools for Business Communications and Data Management
We sometimes use secure AI tools to assist with drafting communications, managing calendars, summarising emails, and organising information stored in our business systems (including email, Teams, and document storage).
These tools process data solely for business purposes under strict confidentiality agreements and data protection safeguards. We only use providers that comply with UK GDPR and other applicable privacy regulations and have appropriate Data Processing Agreements in place.
AI tools are used to support our team, not to make automated decisions about individuals. All outputs are reviewed by a member of our team before use, and data is handled in accordance with our security and retention policies.
If you would like more information about the tools we use, please contact us using the details provided in this privacy notice.
14 Changes to this notice
We review this notice at least annually. Any material changes will be flagged on our home page.